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NETWORK, METHOD AND COMPUTER READABLE MEDIUM FOR 
DISTRIBUTING SECURITY UPDATES TO SELECT NODES ON A NETWORK 



TECHNICAL FIELD OF THE INVENTION 

This invention relates to network technologies, and more particularly, to a 
technique for distributing command and security updates to select nodes on a network. 

CROSS-REFERENCE TO RELATED APPLICATIONS 

This patent application is related to co-pending U.S. Patent Application, Serial 
No. 10333501 , entitled "METHOD AND COMPUTER READABLE MEDIUM 
FOR SUPPRESSING EXECUTION OF SIGNATURE FILE DIRECTIVES DURING 
A NETWORK EXPLOIT," filed October 31, 2001, co-assigned herewith; U.S. Patent 
Application, Serial No. 10001431 , entitled "SYSTEM AND METHOD OF 
DEFINING THE SECURITY CONDITION OF A COMPUTER SYSTEM," filed 
October 31, 2001, co-assigned herewith; U.S. Patent Application, Serial No. 
10001410 . entitled "SYSTEM AND METHOD OF DEFINING THE 
SECURITY VULNERABILITIES OF A COMPUTER SYSTEM," filed October 31, 
2001, co-assigned herewith; U.S. Patent Application, Serial No. 10002695 
entitled "SYSTEM AND METHOD OF DEFINING UNAUTHORIZED 
INTRUSIONS ON A COMPUTER SYSTEM," filed October 31, 2001, co-assigned 
herewith; U.S. Patent Application, Serial No. 1QQQ2423 , entitled "NETWORK 
INTRUSION DETECTION SYSTEM AND METHOD," filed October 31, 2001, co- 
assigned herewith; U.S. Patent Application, Serial No. 10001445 entitled 
"NODE, METHOD AND COMPUTER READABLE MEDIUM FOR INSERTING 
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October 31, 2001, co-assigned herewith; U.S. Patent Application, Serial No. 
10003815 . entitled "METHOD, COMPUTER-READABLE MEDIUM, AND 
NODE FOR DETECTING EXPLOITS BASED ON AN INBOUND SIGNATURE 
OF THE EXPLOIT AND AN OUTBOUND SIGNATURE IN RESPONSE 
THERETO," filed October 31, 2001, co-assigned herewith; U.S. Patent Application, 
Serial No. 10003747 . entitled "METHOD, COMPUTER READABLE 
MEDIUM, AND NODE FOR A THREE-LAYERED INTRUSION PREVENTION 
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SYSTEM FOR DETECTING NETWORK EXPLOITS," filed October 31, 2001, co- 
assigned herewith; U.S. Patent Application, Serial No. 10002072 entitled 
"SYSTEM AND METHOD OF AN OS-INTEGRATED INTRUSION DETECTION 
AND ANTI- VIRUS SYSTEM," filed October 31, 2001, co-assigned herewith; U.S. 
5 Patent Application, Serial No. 10002697 , entitled "METHOD, NODE AND 
COMPUTER READABLE MEDIUM FOR IDENTIFYING DATA IN A 
NETWORK EXPLOIT," filed October 31, 2001, co-assigned herewith; U.S. Patent 
Application, Serial No. 10003820 , entitled "NODE, METHOD AND 
COMPUTER READABLE MEDIUM FOR OPTIMIZING PERFORMANCE OF 

10 SIGNATURE RULE MATCHING IN A NETWORK," filed October 31, 2001, co- 
assigned herewith; U.S. Patent Application, Serial No. 10003819 ^ entitled 
"METHOD, NODE AND COMPUTER READABLE MEDIUM FOR 
PERFORMING MULTIPLE SIGNATURE MATCHING IN AN INTRUSION 
PREVENTION SYSTEM," filed October 31, 2001, co-assigned herewith; U.S. Patent 

15 Application, Serial No. 10002694 ^ entitled "USER INTERFACE FOR 
PRESENTING DATA FOR AN INTRUSION PROTECTION SYSTEM," filed 
October 31, 2001, co-assigned herewith; U.S. Patent Application, Serial No. 
10001728 , entitled "NODE AND MOBILE DEVICE FOR A MOBILE 
TELECOMMUNICATIONS NETWORK PROVIDING INTRUSION 

20 DETECTION," filed October 31, 2001, co-assigned herewith; U.S. Patent 
Application, Serial No. 10003510 entitled "METHOD AND COMPUTER- 
READABLE MEDIUM FOR INTEGRATING A DECODE ENGINE WITH AN 
INTRUSION DETECTION SYSTEM," filed October 3 1 , 200 1 , co-assigned herewith; 
U.S. Patent Application, Serial No. 10002064 ; entitled "SYSTEM AND 

25 METHOD OF GRAPHICALLY DISPLAYING DATA FOR AN INTRUSION 
PROTECTION SYSTEM," filed October 31, 2001, co-assigned herewith; and U.S. 
Patent Application, Serial No. 10001350 , entitled "SYSTEM AND METHOD 
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PROTECTION SYSTEM," filed October 31, 2001, co-assigned herewith. 
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